[ << ] [ < ] [ Up ] [ > ] [ >> ]         [Top] [Contents] [Index] [ ? ]

1.1 Encryption Code

When the user sets a password for private To Do items, the application turns the password into an encryption key using a Password-Based Key Derivation Function (PBKDF). Android 4.4 (KitKat) introduced a breaking change to the SecretKeyFactory resulting in a different key being generated for the same password compared to the key generated in Android 4.3 (Jellybean) and earlier (see “Changes to the SecretKeyFactory API in Android 4.4”). In addition, Android 2.2 (Froyo) had no support for the PBKDF2WithHmacSHA1 algorithm. To allow the password to work for both local data and backup files across all supported Android versions, the app uses a copy of parts of BouncyCastle’s encryption library. This code must remain unchanged in all versions of the To Do app.


This document was generated on March 30, 2025 using texi2html 5.0.